CVE-2026-39087

ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs...

WordPress plugin Spirit Framework has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2024-38665

Name of the Vulnerable Software and Affected Versions If Menu plugin for WordPress versions up to, and including, 0.19.1 Description The issue allows unauthorized modification of the plugin's license key due to a missing capability check on the actions function. This makes it possible for...

CVE-2022-4021

The Permalink Manager Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.2.20.1. This is due to missing or incorrect nonce validation on the extraactions function. This makes it possible for unauthenticated attackers to change plugin settings...

CVE-2021-39563

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause Denial of Service...